PT-2018-3704

CVE-2018-19665

Publicado

2018-07-24

Atualizado

2020-12-14

Descrição por

CVSS 3.1

5.7

Média

MétricasAV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to an integer overflow value in the QEMU Bluetooth emulator hardware subsystem. It allows a remote attacker to cause a denial of service. The Bluetooth subsystem in QEMU also mishandles negative values for length variables, leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Arash Tc

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-190: Integer Overflow or Wraparound

Identificadores relacionados

CVE-2018-19665

BDU:2021-03451

ALT-PU-2018-2870